Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
46775fc2 by Moritz Mühlenhoff at 2026-10-01T13:16:32+02:00
wolfssl triage based on #1149565
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4127,13 +4127,13 @@ CVE-2026-97165 (Joomla Extension - svenbluege.de -
Reflected XSS and open redire
CVE-2026-97164 (Joomla Extension - svenbluege.de - Authenticated arbitrary
path deleti ...)
NOT-FOR-US: Joomla
CVE-2026-94419 (Without NO_SESSION_CACHE_REF, wolfSSL_get_session() does not
return a ...)
- - wolfssl <unfixed>
- [trixie] - wolfssl <no-dsa> (Minor issue)
+ - wolfssl <unfixed> (unimportant)
NOTE: https://github.com/wolfSSL/wolfssl/pull/11500 (v5.9.4-stable)
+ NOTE: built with NO_SESSION_CACHE_REF
CVE-2026-94418 (Under WOLFSSL_SMALL_CERT_VERIFY, ProcessPeerCertParse() runs
the certi ...)
- - wolfssl <unfixed>
- [trixie] - wolfssl <no-dsa> (Minor issue)
+ - wolfssl <unfixed> (unimportant)
NOTE: https://github.com/wolfSSL/wolfssl/pull/11500 (v5.9.4-stable)
+ NOTE: WOLFSSL_SMALL_CERT_VERIFY not built
CVE-2026-94417 (When an application enables both OCSP and CRL revocation
checking on o ...)
- wolfssl <unfixed>
[trixie] - wolfssl <no-dsa> (Minor issue)
@@ -4152,7 +4152,7 @@ CVE-2026-89136 (When using RPK (Raw Public Key), the
client side of a TLS 1.2, 1
NOTE: https://github.com/wolfSSL/wolfssl/pull/11009 (v5.9.4-stable)
CVE-2026-89135 (A failed X509_verify_cert call permanently plants an
unverified attack ...)
- wolfssl <unfixed>
- [trixie] - wolfssl <no-dsa> (Minor issue)
+ [trixie] - wolfssl <not-affected> (Vulnerable code not present, see
#1149565)
NOTE: https://github.com/wolfSSL/wolfssl/pull/11009 (v5.9.4-stable)
CVE-2026-89134 (A certificate with no dNSName SAN but another SAN type present
(e.g. r ...)
- wolfssl <unfixed>
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/46775fc2e9c55f0037bc4bc5bda9a5332feb9092
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/46775fc2e9c55f0037bc4bc5bda9a5332feb9092
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
